Our privacy commitment

The
Leukaemia Foundation of Australia Limited - ABN 57 057 493 017 (referred to as “we”,
“us” and “our”) will endeavour to handle your personal information in accordance
with our Privacy Policy and the Australian Privacy Principles.

This
Privacy Policy summarises how we handle your personal information. We may
revise this Privacy Policy from time to time by updating this page. The revised
Privacy Policy will take effect when it is posted on our website.

1. What is personal information?

Personal information means information or an
opinion about an identified individual, or an individual who is reasonably
identifiable:

whether
the information or opinion is true or not; and

whether
the information or opinion is recorded in a material form or not.

The types of personal
information we collect may include your name, date of birth, gender, contact information,
giving history, credit/debit card information, health information and other
information about your history with, or relationship to blood cancer/s.

2. Whose personal information do we collect?

We collect
personal information from people who are connected to our operations and
activities – including employees, donors, research study participants,
recipients of support services, participants in advocacy campaigns or health
promotion projects, health professionals, suppliers, volunteers and service
providers.

3. How do we collect your personal information?

Where
possible, we will collect your personal information directly from you. This may
be in person (for example, where you attend an event), on the telephone (for
example, if you contact the Leukaemia Foundation for support), or online (for
example, if you sign up for an event online).

We also
obtain personal information from third parties such as contractors (including
fundraising service providers), list vendors, health professionals, social and
community workers. If we collect personal information about you from a third
party and it is unclear that you have consented to the disclosure of your
personal information to us, we will take reasonable steps to contact you and
ensure that you are aware of the circumstances surrounding the collection and
purposes for which we collected your personal information.

4. Why do we collect your personal information?

We may collect your personal information for a
number of purposes relating to the daily running of the Leukaemia
Foundation. These include marketing,
support services, research, health promotion, volunteering and other LF support
and other issues. These are detailed
further below:

b)
Support
services: to provide you with information and
support services, and to evaluate and report on these services. This may also
include newsletters specifically relating to your condition.

c)
Research: to conduct and/or fund research into
the causes of blood cancers, as well as diagnosis, treatment and cures,
improvement in quality of life, and other research news.

d)
Health
promotion: to provide you with information about
living well with a blood cancer, and to seek your support for specific campaigns
that may relate to a blood cancer.

e)
Volunteering
and other support: to
invite you to assist us with community fundraising, patient transport, advocacy
and other activities, where community assistance is required.

f)
Other
issues: communicating with you in relation
to our operations and organisational impact, to verify your identity, to
improve and evaluate our programs and services and to comply with relevant
laws.

Where we
collect your personal information for a specific purpose not outlined above, we
will provide you with a collection notice which explains the primary purpose
and any related secondary purposes for which we are collecting your personal
information.

5.
Health information and
other sensitive information

As part of
administering our services, we may collect health information and other
sensitive information. For example, we may collect medical history information
from you, if you are participating in a health program or research study.
Sensitive information includes the following type of information: racial or
ethnic origin; political opinions; membership of a political association;
religious beliefs or associations; philosophical beliefs; memberships; sexual
orientation; genetic information; biometric information; biometric templates.
We will limit the collection of sensitive information to the minimum amount
required to perform our services.

6. What happens if you don't provide all this information?

If you do
not provide some or all of the personal information requested, we may not be
able to offer you services or provide you with information about our causes,
events, programs and projects.

7.Using a pseudonym or
engaging with us anonymously

Where practicable, you will be given
the opportunity to engage with us on an anonymous basis, or using a pseudonym.

8. Website usage information and cookies

When you
access our website, we may use software embedded in our website (such as
Javascript) and we may place small data files (or cookies) on your computer or
other device to collect information about which pages you view and how you
reach them, what you do when you visit a page, the length of time you remain on
the page, and how we perform in providing content to you.

A cookie does not identify individuals
personally, but it does identify computers. You can set your browser to notify
you when you receive a cookie and this will provide you with an opportunity to
either accept or reject it in each instance.

We may gather your IP address as part
of our business activities and to assist with any operational difficulties or
support issues with our services. This information does not identify you
personally.

9. Opting out of direct
marketing communications

Where we
use your personal information to send you marketing and promotional information
by post, email or telephone, we will provide you with an opportunity to opt-out
of receiving such information. By electing not to opt-out, we will assume we
have your implied consent to receive similar information and communications in
the future. We will always ensure that our opt-out notices are clear,
conspicuous and easy to take up.

If you do not wish to receive
direct marketing communications from us, please contact us at Leukaemia
Foundation, GPO Box 9954 IN YOUR CAPITAL CITY, Tel: 1800 620 420 and
email: info@leukaemia.org.au

Researchers to conduct research studies to
the causes of cancer, as well as diagnosis, treatment and cures.

Third
parties for marketing purposes: we may provide your contact details
to other like-minded organisations to contact you with information that may be
of interest to you. From time to time, we participate in data collectives where
we share your personal information (other than sensitive information) with
other organisations.

Cancer
Council Australia and state and territory Cancer Councils that are members of Cancer
Council Australia

Wherever
we propose to disclose your personal information to a third party not outlined
above, we will provide you with a collection notice which explains the
circumstances in which we might disclose your personal information.

11. Cross-border disclosures of your personal information

We use data hosting facilities and
third party service providers to assist us with providing our goods and
services. As a result, your personal information may be transferred to, and
stored at, a destination outside Australia, including but not limited to New
Zealand, Netherlands, China, Singapore, Hong Kong, Ireland, Canada, United
States of America and the United Kingdom

Personal information may also be
processed by staff or by other third parties operating outside Australia who
work for us or for one of our suppliers, agents, partners associated with Leukaemia
Foundation.

We take such steps as are necessary in
the circumstances to ensure that any overseas third party service providers we
engage do not breach the Australian Privacy Principles, including through
contractual arrangements.

If your personal information is
collected using a collection notice that references this Privacy Policy, you
are taken to consent to the disclosure, transfer, storing or processing of
their personal information outside of Australia. You also acknowledge and
understand that by providing such consent that we will not be required to take
such steps as are reasonable in the circumstances to ensure such third parties
comply with the Australian Privacy Principles.

12. Where is your personal information stored?

We take
all reasonable steps to protect all of the personal information we hold from
misuse, interference and loss, and from unauthorised access, modification or
disclosure. Your personal information will be stored on a password protected
electronic database, which may be on our database, a database maintained by a
cloud hosting service provider or other third party database storage or server
provider. Backups of electronic information are written to drives which are
stored offsite.

Hard copy
information is generally stored in our offices, which are secured to prevent
entry by unauthorised people. Any personal information not actively being used
is archived, usually for 7 years, with a third party provider of secure
archiving services.

Where
personal information is stored with a third party, we have arrangements which
require those third parties to maintain the security of the information. We
take reasonable steps to protect the privacy and security of that information,
but we are not liable for any unauthorised access or use of that information.
Your personal information will stay on the database indefinitely until you
advise you would like it removed, unless we de-identify it or destroy it
earlier in accordance with privacy law requirements.

13. Your direct debit or credit
cards

We use
Secure Socket Layer (SSL) certificates which is the industry standard for
encrypting your credit card and debit card numbers, your name and address so
that it cannot be viewed by any third party over the internet. Your financial
information is encrypted on our servers and access to this information is
restricted to our authorised staff only.

14. Access to your personal information

We will,
upon your request, and subject to applicable privacy laws, provide you with
access to your personal information that is held by us. However, we request
that you identify, as clearly as possible, the type(s) of information
requested. We will deal with your request to provide access to your personal
information within 30 days and you agree we may charge you our reasonable costs
incurred in supplying you with access to this information.

Your
rights to access personal information are not absolute and privacy laws dictate
that we are not required to grant access in certain circumstances such as
where:

access
would pose a serious threat to the life, safety or health of any individual or
to public health or public safety

access
would have an unreasonable impact on the privacy of other individuals

the
request is frivolous or vexatious

denying
access is required or authorised by a law or a court or tribunal order

access
would be unlawful, or

access
may prejudice commercial negotiations, legal proceedings, enforcement
activities or appropriate action being taken in respect of a suspected unlawful
activity or serious misconduct.

If we
refuse to grant you access to your personal information, we will provide you
with reasons for that decision (unless it is unreasonable to do so) and the
avenues available for you to complain about the refusal.

Participants
in research studies should note that access to personal information such as DNA
sequences is not generally granted, in accordance with the first exception
above. This is notified to you, where applicable, at the time of committing to
the research study.

15.
Updating your personal
information

You may
ask us to update, correct or delete the personal information we hold about you
at any time. We will take reasonable steps to verify your identity before
granting access or making any corrections to or deletion of your information.
We also have obligations to take reasonable steps to correct personal
information we hold when we are satisfied that it is inaccurate, out- of-date,
incomplete, irrelevant or misleading for the purpose for which it is held.

16. Complaints

If you have any queries or
would like to make a complaint regarding relating to our Privacy Policy or the
manner in which we handle your personal information, please contact our Privacy
Officer, Glen Shields, on 07 3318 4418 or email privacy@leukaemia.org.au. We
endeavour to respond to complaints and queries within fourteen days of their
receipt. If you are dissatisfied with our response, you may refer the matter to
the Australian Information (Privacy) Commissioner (see www.oaic.gov.au).

If you do
not provide some or all of the personal information requested, we may not be
able to offer you services or provide you with information about our causes,
events, programs and projects.

Quick Links

For Media

Privacy

Your privacy is important to us - that is why we treat your personal information with confidence. To learn more about how and why we collect and use any personal or sensitive information about you, please read our notification statement